bea25636ba6bc667a0bb7927bcc2bb4e_JaffaCakes118 | Triage

Sharing

General

Target

bea25636ba6bc667a0bb7927bcc2bb4e_JaffaCakes118
Size

35KB
MD5

bea25636ba6bc667a0bb7927bcc2bb4e
SHA1

69b07a8a70656c36b21c18db9e3c7fa06c9f1f38
SHA256

65e442c10053ac080f45377a3d3afc71328584a9f32bd2b81d109c6f0155e218
SHA512

ba1cf2a91228c63ae576fa43affd2788a6126d61824a470dcdb38995d617a8b9bc91a3fe8d2dc03e1f3d0743f3ed40aa6ddb2e1e3e86b0b8897b1582a652cf3a
SSDEEP

768:blkRPFUfRaK3QJGxDupnZP88KnWKBRNNSZd+7hXEWQ7cTYm3:blkRyfRaK3QIDSZ08KhNc+7hXEx7cTYO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bea25636ba6bc667a0bb7927bcc2bb4e_JaffaCakes118

Files

bea25636ba6bc667a0bb7927bcc2bb4e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d58f292ffbd2b00fa779d18e5aac719b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualProtect

user32

CheckMenuItem
BeginDeferWindowPos
GetWindowDC
EndPaint
GetCursorPos

gdi32

LineTo
CreateCompatibleDC

Sections

.text
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pcle
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ